Overview
ISO/IEC 27009 — Sector-specific application of ISO/IEC 27001. AQS provides audit, certification, gap analysis and training services for this standard.
ISO/IEC 27009 addresses sector-specific application of ISO/IEC 27001. AQS helps organisations understand the requirements of the standard, assess their current level of conformity and demonstrate compliance to customers, regulators and partners.
Our services for ISO/IEC 27009
- Gap analysis – an independent assessment of your current practices against the requirements of the standard, with a prioritised action plan.
- Conformity assessment – third-party evaluation and attestation of conformity for organisations that need documented evidence of compliance.
- Awareness & auditor training – practical courses for implementers, internal auditors and management.
- Supplier & second-party audits – evaluate suppliers and partners against ISO/IEC 27009 on your behalf.
Who is it for?
Any organisation – public or private, large or small – that wants to manage sector-specific application of ISO/IEC 27001 in a structured, internationally recognised way.
Key benefits
- Demonstrate compliance with a globally recognised benchmark.
- Reduce risk, incidents and non-conformities through structured controls.
- Win tenders and meet customer or regulatory requirements.
- Drive continual improvement with measurable objectives.